API keys, passwords or tokens committed into the repo.
-
Serious private-key Identified a Private Key, which may compromise cryptographic security and sensitive data encryption.
spaceship/spec/connect_api/fixtures/asc_key_base64.json:4
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious pkcs12-file Found a PKCS #12 file, which commonly contain bundled private keys.
match/spec/fixtures/existing/certs/distribution/E7P4EE896K.p12
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious private-key Identified a Private Key, which may compromise cryptographic security and sensitive data encryption.
match/spec/fixtures/existing/certs/distribution/E7P4EE896K.p12:1
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious pkcs12-file Found a PKCS #12 file, which commonly contain bundled private keys.
match/spec/fixtures/test.p12
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious private-key Identified a Private Key, which may compromise cryptographic security and sensitive data encryption.
spaceship/spec/connect_api/fixtures/asc_key.json:4
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious private-key Identified a Private Key, which may compromise cryptographic security and sensitive data encryption.
spaceship/spec/connect_api/fixtures/asc_key_in_house.json:4
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious private-key Identified a Private Key, which may compromise cryptographic security and sensitive data encryption.
spaceship/spec/connect_api/fixtures/asc_key.p8:1
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Serious private-key Identified a Private Key, which may compromise cryptographic security and sensitive data encryption.
supply/spec/fixtures/sample-service-account.json:5
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
fastlane/lib/fastlane/actions/splunkmint.rb:146
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
fastlane/spec/actions_specs/splunkmint_spec.rb:90
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
fastlane/spec/actions_specs/splunkmint_spec.rb:104
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
fastlane/spec/actions_specs/splunkmint_spec.rb:121
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
fastlane/spec/actions_specs/splunkmint_spec.rb:131
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
fastlane/spec/actions_specs/splunkmint_spec.rb:149
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
fastlane/spec/actions_specs/splunkmint_spec.rb:155
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
fastlane/spec/actions_specs/splunkmint_spec.rb:173
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
fastlane/spec/actions_specs/splunkmint_spec.rb:180
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
fastlane/spec/fixtures/requests/github_create_file_response.json:10
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
fastlane/spec/fixtures/setup_workspace/Example.xcodeproj/project.xcworkspace/xcshareddata/Example.xcscmblueprint:2
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
fastlane/spec/fixtures/setup_workspace/Example.xcodeproj/project.xcworkspace/xcshareddata/Example.xcscmblueprint:10
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
fastlane/spec/fixtures/setup_workspace/Example.xcodeproj/project.xcworkspace/xcshareddata/Example.xcscmblueprint:27
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
fastlane/spec/fixtures/xcodeproj/crashlytics_beta_project_two_skeems.xcodeproj/project.xcworkspace/xcshareddata/crashlytics_beta_project_no_run_script_build_phase copy.xcscmblueprint:2
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
fastlane/spec/fixtures/xcodeproj/crashlytics_beta_project_two_skeems.xcodeproj/project.xcworkspace/xcshareddata/crashlytics_beta_project_no_run_script_build_phase copy.xcscmblueprint:27
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
fastlane/spec/fixtures/xcodeproj/crashlytics_beta_project_two_skeems.xcodeproj/project.xcworkspace/xcshareddata/crashlytics_beta_project_two_skeems.xcscmblueprint:2
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
-
Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
fastlane/spec/fixtures/xcodeproj/crashlytics_beta_project_two_skeems.xcodeproj/project.xcworkspace/xcshareddata/crashlytics_beta_project_two_skeems.xcscmblueprint:10
A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.